Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
File:                     bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json)
Hash identifier:          Mx0TuOPAcJTHY4sb4DMxs1E76b23uwCDf+4ZH0ZXctw=
Subject key identifier:   02:47:F2:5B:03:4B:B9:D6:F7:69:48:B0:6B:7F:2D:0F:C5:46:0C:56
Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
Certificate issuer:       /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
Manifest number:          0185
Signing time:             Mon 11 May 2026 04:41:12 +0000
Manifest this update:     Mon 11 May 2026 04:41:12 +0000
Manifest next update:     Mon 18 May 2026 04:41:12 +0000
Files and hashes:         1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: Yfa9oLgiSbESOoLbbF/IfwsIHXfpqbKZ0y8pmKdmCGE=)
                          2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: fTwgf/z1JlaZSIUWhcpYQ8BO2OuYl7hP0D0SmMwZrI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
        Validity
            Not Before: May 11 04:41:12 2026 GMT
            Not After : May 18 04:41:12 2026 GMT
        Subject: CN=6a015de8-9a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:6e:8b:e4:6d:04:fd:db:cb:c5:09:60:58:
                    87:4f:26:57:04:b7:96:02:4c:92:08:13:fe:4a:57:
                    3f:54:a7:28:41:d4:97:30:62:00:58:30:01:62:a8:
                    bd:99:51:bc:9b:86:32:70:51:a8:15:c5:b7:a1:a5:
                    fa:22:31:66:94:0e:02:ad:ca:c1:ba:a7:bf:9b:29:
                    98:bb:b2:e6:fa:98:ba:a0:76:fa:88:1c:e9:4b:78:
                    25:8b:8b:16:49:96:aa:e0:86:61:3e:32:7f:4e:cd:
                    0f:a1:6f:2b:0c:2f:7f:bb:b2:2b:06:f1:86:f9:ba:
                    cc:82:f6:4d:0a:b9:6d:2e:7a:17:d1:c5:d0:3f:68:
                    b1:52:7c:29:2c:87:4a:c6:50:98:de:dc:65:d3:36:
                    fa:b6:35:be:12:97:05:87:f2:5d:a4:f6:29:69:db:
                    66:81:1c:03:42:5b:18:18:43:ec:ca:1e:6a:44:0b:
                    51:88:3b:0c:b8:76:e8:4e:c0:24:3c:84:9c:73:ba:
                    16:78:0d:ea:41:c9:76:7f:57:ed:92:bd:c0:59:04:
                    f1:43:05:5a:b2:41:18:f8:d9:31:77:d7:fa:72:c9:
                    60:dd:f9:0c:eb:d4:41:b7:75:e1:77:ac:44:f9:f3:
                    93:87:54:58:7f:af:c4:25:91:86:c2:92:ce:4f:f8:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:47:F2:5B:03:4B:B9:D6:F7:69:48:B0:6B:7F:2D:0F:C5:46:0C:56
            X509v3 Authority Key Identifier:
                keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:7f:4a:ef:37:e0:27:40:6b:6e:d5:ae:26:c8:52:76:23:98:
         9b:e8:61:c2:e4:52:8f:78:e3:dd:03:24:59:c2:9d:ba:73:a5:
         16:24:87:85:d3:54:ef:da:60:ff:43:c7:62:f8:34:85:41:68:
         d8:40:dd:9d:61:a8:ec:d5:85:79:56:ba:5d:ee:bc:63:b2:34:
         e0:ff:33:dd:f5:84:4c:7b:7f:f8:fb:54:6e:88:59:5b:fe:20:
         5f:b6:4a:58:32:1d:76:e5:af:94:03:14:e5:c4:37:9e:22:6d:
         7e:bc:17:81:9f:e0:5a:e7:ba:0e:5c:b6:93:5f:a4:66:73:46:
         18:a2:6e:e0:96:ea:55:77:d8:2a:5c:75:c0:d6:98:02:e0:71:
         f5:b0:b7:bd:1e:52:e3:fc:21:de:92:7f:14:1a:00:8f:ab:8c:
         15:45:77:47:2a:47:89:ec:81:37:d9:bd:5d:5a:21:5e:fd:02:
         ac:6c:68:e4:09:10:7a:31:d6:ff:a0:de:5a:b7:6e:2a:7d:6e:
         c2:da:2c:35:31:47:49:a9:de:77:42:4b:c9:3a:e4:35:79:1e:
         40:cd:42:8a:b4:72:68:0d:39:c9:ad:07:a3:8c:60:00:2f:0e:
         3d:fe:c4:b1:45:e1:7b:7e:93:9e:8f:d6:e1:7d:09:9a:f4:56:
         e4:f9:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:20 2026 by rpki-client